News for hackers. Stuff that matters.
Re:You can link an OpenPGP key to a German eID by hannob on Wednesday May 31, 2023 @04:00PM (#36143425)
Yeah, I can use PGP to encrypt e-mail, with all the problems that come with it. However... I don't need a signature from governikus to do this.
Re:You can link an OpenPGP key to a German eID by Zemtomo on Wednesday May 31, 2023 @05:14PM (#36144419)
It becomes an official communication method.

This should allow you to actually send legal save communication to the government.

Re:You can link an OpenPGP key to a German eID by germanier on Wednesday May 31, 2023 @05:42PM (#36144731)
There is no special legal status attached to that.

Actual electronic signatures recognized by law are not based on GPG.

Re:You can link an OpenPGP key to a German eID by Zemtomo on Thursday June 01, 2023 @02:47AM (#36148232)
Isn't that a page from Germany?

Using your eID?

Do you know this or do you assume this?

Re:You can link an OpenPGP key to a German eID by germanier on Thursday June 01, 2023 @03:04AM (#36148319)
Yes, my statements are about the legal reality I Germany.

GPG signatures convey no special legal status above regular email even if the key is signed by a government-owned company that verified your eID.

Re:You can link an OpenPGP key to a German eID by Zemtomo on Thursday June 01, 2023 @04:35AM (#36148762)
I read it differently.

But let's see how it is currently reading this can become the defacto standard.

And technically it's a good workflow/choice

Re:You can link an OpenPGP key to a German eID by germanier on Thursday June 01, 2023 @07:35AM (#36149802)
That service is not new. And nobody seriously considers adopting GPG for that, as it's has serious design flaws.
Re:You can link an OpenPGP key to a German eID by Zemtomo on Thursday June 01, 2023 @12:00PM (#36153052)
What design flaw?
Re:You can link an OpenPGP key to a German eID by germanier on Thursday June 01, 2023 @12:04PM (#36153122)
My mother would not be able to keep her private key secure.
Re:You can link an OpenPGP key to a German eID by Zemtomo on Thursday June 01, 2023 @05:09PM (#36157373)
But that's not the point.

This would even allow companies to offer this for you because the only interface necessary is the key

Re:You can link an OpenPGP key to a German eID by madsr on Thursday June 01, 2023 @03:43AM (#36148498)
If your PGP key isn't signed by anyone, then there's no way to verify that it's really you - other than contacting you and checking the fingerprint. By having a trusted third party such as Governikus sign it, anyone can verify instantly that _this_ PGP key is actually from a person with a _name_ for which they also have a government ID with that exact name.

I can envision a _lot_ of use cases for having your name publicly recognized by a trusted party.